Tkt_cest_winrar[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Tkt_cest_winrar.exe
Size

3.4MB
MD5

07125a38e97180f0f036edf13859f6fd
SHA1

81d97e9b99636ad3bbeeaf90022d9fd9f87ea9e4
SHA256

44fbc6e86a04e12ee32ca3599b665edb48038a462b83a5e1c7389ac9d218e7dd
SHA512

8d881367a8ab0882c2f9a0596fbdef51e6243fb8f84cd0eeb9cf90fe5080ac9c67a944304897e76743d7cda0da375393b7d8c75cfb60b5abf47ce591c7f61a8d
SSDEEP

98304:5txHYKXT+EPsCB2EoiiXIwsn633/DyesERsKJAoq0:5nhj+ebB0snM3WjERsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Tkt_cest_winrar.exe

Files

Tkt_cest_winrar.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ